General
- Target 2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop
- Size 27.1MB
- Sample260517-nbxc4afv3x
- SHA256 1ef64572d4248729f4a7d2cb623feed965cfb55847628c04b676f97360ccd7d8
- MD5 314ef089bab7c0e1291abc9a367c5ca6
- SHA1 4c883f56cbf610be591cded1a399f61f01f943a8
- SHA512 e521a5482e0858d4b1c5bcece76a868d8d334a03c22cdc1d3bb1eb087267d869ae68ff69a97717184f9f7f78fe06babcbcc909a5791885f9f2c619a7c38f4912
- SSDEEP 786432:yLxykIoNvZohg63jSh/la5zR6bEPID+RY:yLotV3jSp85zkEPC+RY
- TLSH T1385733512FBA4170E2B32AB2967C92603E767F215B3081CB96543D6FBE726C19934373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_314ef089bab7c0e1291abc9a367c5ca6_elex_stealc_stop
- Size 27.1MB
- SHA256 1ef64572d4248729f4a7d2cb623feed965cfb55847628c04b676f97360ccd7d8
- MD5 314ef089bab7c0e1291abc9a367c5ca6
- SHA1 4c883f56cbf610be591cded1a399f61f01f943a8
- SHA512 e521a5482e0858d4b1c5bcece76a868d8d334a03c22cdc1d3bb1eb087267d869ae68ff69a97717184f9f7f78fe06babcbcc909a5791885f9f2c619a7c38f4912
- SSDEEP 786432:yLxykIoNvZohg63jSh/la5zR6bEPID+RY:yLotV3jSp85zkEPC+RY
- TLSH T1385733512FBA4170E2B32AB2967C92603E767F215B3081CB96543D6FBE726C19934373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with SmartAssembly
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.